Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft
File:                     smS9DDwCpMvCz3SpNn481TB5hyY.mft (raw, json)
Hash identifier:          2lDfJ49AfjBwPyRXhrEHPCLqB/HVwMQyOA3BpmwNlqk=
Subject key identifier:   38:E6:79:D1:5D:EF:2A:FB:29:33:5F:5F:60:95:4B:D6:A4:43:73:D1
Authority key identifier: B2:64:BD:0C:3C:02:A4:CB:C2:CF:74:A9:36:7E:3C:D5:30:79:87:26
Certificate issuer:       /CN=b264bd0c3c02a4cbc2cf74a9367e3cd530798726
Certificate serial:       0190C8B8DDDA1FE9D438DE8DF40B055310EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smS9DDwCpMvCz3SpNn481TB5hyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft
Manifest number:          0569
Signing time:             Fri 19 Jul 2024 02:01:16 +0000
Manifest this update:     Fri 19 Jul 2024 02:01:16 +0000
Manifest next update:     Sat 20 Jul 2024 02:01:16 +0000
Files and hashes:         1: 0V_LTYEDfJNyJmghNs_MSEUm5EA.roa (hash: 6yn5iO3tavP60XLVkWSvqVvHbjFZPkZlUZpYI4w5qQY=)
                          2: smS9DDwCpMvCz3SpNn481TB5hyY.crl (hash: dlN18a7ZvskuS4BbXIZYP5nMBfaSHv3RXwdmd4V006c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c8:b8:dd:da:1f:e9:d4:38:de:8d:f4:0b:05:53:10:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b264bd0c3c02a4cbc2cf74a9367e3cd530798726
        Validity
            Not Before: Jul 19 02:01:16 2024 GMT
            Not After : Jul 20 02:01:16 2024 GMT
        Subject: CN=38e679d15def2afb29335f5f60954bd6a44373d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:1b:7d:09:eb:de:37:ef:4d:d0:04:0b:b9:
                    f2:54:1c:a3:f0:79:e4:4b:4c:c4:48:84:2d:99:ba:
                    5d:cd:29:43:e5:06:be:7e:4c:a0:0d:ca:61:6c:eb:
                    44:82:9d:ec:38:16:0a:6c:10:b5:f4:d5:65:8e:d6:
                    b8:5c:ef:a3:45:56:10:ae:1a:aa:41:eb:3f:d3:ea:
                    b2:ff:ce:03:15:e8:d5:3d:9a:2a:a4:91:d3:6a:b1:
                    d9:39:19:83:29:87:99:43:ba:5d:cc:4a:25:5d:f9:
                    d3:ba:03:3b:74:28:c3:ad:31:b8:ec:69:c9:70:9e:
                    fa:83:9c:bd:36:bb:0a:74:08:ab:45:b6:fe:74:a5:
                    5f:e0:f3:fd:26:f1:c9:c7:da:c7:0a:b4:37:9e:fe:
                    b9:a9:9a:92:2e:14:eb:ba:18:5d:e2:17:03:d2:99:
                    e9:8e:ff:d1:fd:92:f1:58:e5:36:1e:fc:30:27:5b:
                    cc:3c:15:4a:bb:7e:52:c2:27:6f:7a:61:68:54:6c:
                    06:82:a4:0a:e4:df:85:7c:2d:38:06:23:49:2b:ee:
                    a0:cc:e8:c5:59:de:66:d0:16:b4:8b:7e:e9:ce:a2:
                    28:cf:58:a5:25:6b:1c:e3:60:5c:25:37:c2:8d:af:
                    5a:18:f7:dd:76:8e:f8:93:ff:e3:68:ff:8d:7c:98:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:79:D1:5D:EF:2A:FB:29:33:5F:5F:60:95:4B:D6:A4:43:73:D1
            X509v3 Authority Key Identifier:
                keyid:B2:64:BD:0C:3C:02:A4:CB:C2:CF:74:A9:36:7E:3C:D5:30:79:87:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smS9DDwCpMvCz3SpNn481TB5hyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ecdb70-5e6d-4d4a-bc27-9e90f02c9313/1/smS9DDwCpMvCz3SpNn481TB5hyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:ec:35:9c:5e:1a:9b:c0:0e:9e:e2:b6:52:2f:ba:e0:1c:
         fa:3e:2b:fd:42:9e:61:27:d4:60:88:4d:70:7d:b0:b8:c4:76:
         05:0d:6f:d6:9d:2b:92:14:4f:97:96:a9:6f:04:44:07:93:ef:
         fc:15:af:5e:47:16:d5:36:8e:76:ef:d4:08:ce:45:f4:ea:42:
         46:55:2b:27:15:9d:31:14:d8:d4:37:c7:38:5d:cf:5b:af:ab:
         9a:9e:85:2a:3d:ec:56:b7:29:14:a5:65:8b:88:83:f9:02:06:
         f0:59:e0:42:59:45:93:67:4d:71:c2:78:94:93:49:05:f2:6b:
         78:82:ae:a1:2f:97:67:4b:26:4a:e2:55:59:08:d9:a0:44:4d:
         8e:6c:4b:8d:67:3c:d2:f4:3e:12:d0:04:f3:c3:d8:87:82:c5:
         6a:19:74:30:f9:da:b9:d8:16:2a:c5:fa:a6:d9:8f:1e:98:48:
         87:29:25:39:5a:86:51:4e:9f:3e:d8:69:99:45:82:a2:a9:54:
         49:11:bf:2f:3d:70:81:16:1e:29:f4:68:35:a9:71:89:62:69:
         9d:c2:49:61:c1:ce:13:e4:25:f0:11:95:49:c8:c8:17:6c:60:
         bf:e7:04:19:6e:ca:3c:fd:81:64:d7:f6:65:43:53:11:7e:ef:
         ed:fd:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----